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EFFICIENT HASHING METHOD 
Background of the Invention 

5 

Field of the Invention 

The present invention relates to data manipulation; more specifically, the 
invention relates to an efficient technique for representing long strings of data as shorter 
strings of data. 

10 

Description of the Related Art 

Hashing is a technique for representing longer lengths of data as shorter lengths of 
data. The techniques are such that there is a relatively small probability that two different 
longer lengths of data will be represented as identical short lengths of data. The feature is 
1 5 called a probability of collision. 

Pr(h(m l ) = h{m 2 ))<e (1) 
2' 

20 The probability of collision is represented by Equation (1) which indicates that the 

probability of a hashing function "h" performed on a string x, being equal to the result of 

a hashing function "h" performed on a string x 2 being less than or equal to -^j or e. 

The number of bits contained in the longer unhashed string is "n" and is called a 
domain. The number of bits in the shorter or hashed string is "1" and is often referred to 
25 as the range of the hashing function. A hashing function that satisfies Equation (1) is 
often referred to as e universal. 
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?r(h(m i )-h(m 2 ) = A)<s (2) 


Another property typically associated with hashing functions is represented by 
Equation (2) where it indicates that the probability of the difference between the output of 
a hashing function "h" on string x l and the output of a hashing function on string x 2 being 

equal to some preselected number A is less than or equal to or s. Hashing functions 

that satisfy Equation (2) are typically referred to as 8 A universal hash functions. 

?r{h{m,)= Cl ,h{m 2 )=c 2 )<-L (3) 

'A 

2' 

Some hash functions also have a third property illustrated by Equation (3). 
1 5 Equation (3) shows that the joint probability of the output of hashing function "h" for 
input string x x being equal to a predetermined number c, and the output of hashing 

function "h" for input string x 2 being equal to predetermined number c 2 is less than or 

£ . A hashing function that satisfies Equation (3) is referred to as s strongly universal. 
Hashing functions that satisfy Equation (3) automatically satisfy Equations (1) and (2). 

20 Hashing functions are used in many applications, one of which is to simplify 

searching for text strings. When used for searching for text strings, the hashing function 
is used to reduce the size of the stored information and then the same hashing function is 
used to reduce the size of the search criteria. The shortened search criteria is then used to 
search for the shortened stored* information to more efficiently locate a desired piece of 

25 information. Once the desired piece of information has been located, the unhashed or full 
length text associated with the shorted text can be provided. 
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Hashing functions are also used in wireless communications for message 
authentication. A message is authenticated by sending a message string along with a tag, 
calculated by performing a cryptographic function on the message. Forming a tag of a 
message string is computationally intensive. Hash functions are used to shorten the 
5 message to a tag so that the cryptographic processing required is less intense. 


Techniques such as linear hashing illustrated by Equation (4) and MMH hashing 
illustrated by Equation (5) are now used to represent longer strings of data or text as 
shorter strings where the probability of two different long strings producing the same 
short string is relatively small. These hashing functions require a multiplication of a key 
15 that is "w" words long by a "w" words long message or text that is to be hashed. As a 
result, w 2 operations are required to perform a hashing of a particular string of data or 
text. For large strings of data or text having many words, this results in a 
computationally intensive operation. 

20 Summary of the Invention 

The present invention provides an efficient hashing technique that uses W ^ W 

operations to hash a string "w" words long rather than the v^operations of the prior art. 
The present invention achieves this efficiency by squaring the sum of the key and the 
string to be hashed rather than forming a product of the key and the string to be hashed. 


h(m) = (ma)mod p 


(4) 



(5) 


10 


25 



(6) 
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In one embodiment of the invention, as illustrated by Equation (6), a hashing of a 
message "m" is performed by summing the message string with a key string "a" and then 
forming the square of that summation. A modular "p" operation performed on the result 
5 of the squaring operation and a modular 2 1 operation is performed on the result of the 
modular "p" operation. In this case, both "m" and "a" are of the same length, that is, 
"n" bits or "w" words long. It should be noted that "a" may be longer than "n" bits, but 
"n" bits is preferable. The value "1" refers to the length in bits of the shortened string that 
results from the hashing and is referred to as the range. The value "p" is selected as the 
10 first prime number greater than 2° where "n" is the number of bits in the message string 
"m". It should be noted that Equation (6) provides a hashing method that satisfies 
Equations (1) and (2), that is, the hashing method of Equation (6) is A universal. 

h(m) = (((m + a) 2 + b)mod p )mod 2 , (7) 

15 

In the second embodiment of the present invention, a strongly universal hashing 
method is provided. In this case, message string "m" is summed with key "a" and then 
the resulting sum is squared. Both message string "m" and key "a" are "w" words long 
containing a total of "n" bits. It should be noted that key "a" may contain more than "n" 

20 bits, but "n" is preferable. The result of the squaring operation is then summed with a 
second key "b" which is at least "n" bits long. A modular "p" operation is performed on 
the sum of the squared term and key "b" as discussed above with regard to Equation (6). 
A modular 2 1 operation is performed on the result of the modular "p" operations as was 
described with regard to Equation (6). Using this hashing method provides a strongly 

25 universal hashing method that satisfies Equation (1), (2) and (3). 

In yet another embodiment of the present invention, "k" messages or strings are 
hashed so that a single shorter string is produced. 
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h(m l ,...m K ) = \jj^(m i + a,.) 2 jmod p jmod 2/ (8) 

Equation (8) illustrates the hashing function where "k" messages, each of which 
is "w" words long are hashed to form a single shorter string. Each message mj is summed 
with a key ^ and the resulting sum is squared. The result of the squaring operation for 
each message ni; is then summed over the "k" messages. A modular "p" operation is 
performed on the overall sum, and a modular 2 1 operation is performed on the result of 
the modular "p" operation. The values "p" and "1" are once again defined as described 
above. The hashing method illustrated by Equation (8) produces a A universal hashing 
function that satisfies Equations (1) and (2). 

Brief Description of the Drawing 

FIG. 1 is a flowchart of a square hashing method; 

FIG. 2 is a flowchart of a strongly universal square hashing method; and 

FIG. 3 is a flowchart of a second A universal square hashing method. 

Detailed Description 

FIG. 1 illustrates a method for carrying out the square hashing method of 
Equation (6). In step 100 an input string or message "m" is inputted. In step 102 an 
input key "a" is inputted. The message or string "m" and the key "a" are each "n" bits 
long consisting of "w" words. Key "a" is a random or pseudo-random number and may 
be longer than "n" bits, but "n" bits is preferable. In step 104 the sum "s" of string "m" 
and key "a" is formed. In step 106 sum "s" is squared. In step 108 a modular "p" 
operation is formed on the result of step 106. "p" is the next prime number larger than 
2 n ; however, "p" may be a larger prime which may degrade performance. In step 110 a 
modular 2 1 operation is performed on the result of step 108. "1" is the number of bits in 
the short output message or string. In step 1 12 the result of the modular 2 1 operation is 
outputted. The process of FIG. 1 results in a message or string of "n" bits being reduced 
to a message or string of "1" bits. It should be noted that the process associated with FIG. 
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1 executes an s A universal hash function that satisfies the properties of Equations (1) and 
(2). 

FIG. 2 illustrates a method for carrying out the strongly universal hashing method 
described by Equation (7). In step 140 a message or string "m" is inputted. In step 142 
5 keys "a" and "b" are inputted. Message "m", key "a" and key "b" are each "n" bits long 
having "w" words. In step 144 the sum of message "m" and key "a" is formed and stored 
as sum "s". In step 146 the square of sum "s" is stored as term "SQ". In step 148 the 
sum of the term "SQ" and key "b" is formed. In step 150 a modular "p" operation is 
performed on the result produced by step 148. Once again, "p" is equal to the next prime 

10 number greater than 2 a ; however, "p" may be a larger prime which may degrade 

performance. In step 152 a modular 2 l operation is performed on the result from step 150. 
"1" is equal to the number of bits in the string or message to be outputted by this method. 
In step 154 the short message or string of length "1" is outputted. It should be noted that 
the method of FIG. 2 reduced a string or message of "n" bits to a string or message of "1" 

15 bits. It should also be noted that the process of FIG. 2 is an s strongly universal hash 
function that satisfies the properties of Equations (1), (2) and (3). 

FIG. 3 illustrates a method for performing the 8 A universal hashing method 
described by Equation (8). In step 170 index "i" is set equal to 1 and the variable SUM is 
set equal to 0. In step 172 the value of "k" is inputted, "k" is equal to the number of 

20 strings or messages that will be inputted to produce a single shortened message. In step 
174 message or string ru; is separated, and in step 176 input key a; is inputted. It should 
be noted that message or string n^ and input key ^ are of equal length and have "n" bits 
composing "w" words. Key "a/' is a random or pseudo-random number and may be 
longer than "n" bits, but "n" bits is preferable. Preferably, is a random number. 

25 Random numbers can be generated from many sources such as pseudo-random 

generators. In step 178 sum Sj is formed by forming the sum of message uij and key a;. 
In step 1 80 the square of S; is set equal to variable SQ, . In step 1 82 the variable SUM is 
set equal to the variable SUM plus SQj. In step 184 the value of "i" is checked to 
determine if it is equal to the value "k". If it is not equal to the value "k", step 186 is 

30 executed where the value of index "i" is incremented by "1" and then step 174 is 
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executed. If in step 184 the value of "i" is determined to be equal to "k", step 188 is 
executed where a modular "p" operation is performed on the current value of the variable 
SUM. As discussed previously, the value "p" is the next prime number greater than the 
value 2 n ; however, "p" may be a larger prime which may degrade performance. In step 
5 1 90 a modular 2 1 operation is performed on the results produced in step 1 88. Once again, 
"1" is the number of bits composing the output string or message. In step 192 the 
shortened message or string of "1" bits is outputted. It should be noted that the process of 
FIG. 3 reduced "k" messages of "n" bits each to one message of "1" bits. It should also 
be noted that the hashing method of FIG. 3 is a s A universal hashing method that satisfies 

1 0 the properties of Equations ( 1 ) and (2). 

In reference to FIGS. 1, 2 and 3, it should be noted that the value "1" is typically 
chosen based on a trade-off between desiring a short output message of length "1" and the 
desire to minimize the probabilities of Equations (1) and (2) and in the case of an s 
strongly universal hash function, Equation (3). 

15 The following section provides an abbreviated proof showing that the disclosed 

squaring hash functions satisfies the properties for Equations (1), (2) and (3). 

Theorem 1 : The hashing function described by Equation (6) is A - universal. 

20 

Proof: For all "m" "n" s Z p , and As Z p : 


P x r[h x (m)-h x (n)= A] 


(1) 


25 


= P x r[(m + x) 2 - (n + x) 2 = A] 
= P x r[(m 2 - "n" 2 + 2(m-n)x = A ] 
= l/p 


(2) 


(3) 
(4) 
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Where the last inequality follows since for any given "m" * "n" s Z p and S s Z p there 


is a unique x which satisfies the equation m 2 - "n" 2 + 2(m-n)x = S. 

5 Theorem 2: The hashing function described by Equation (7) is a strongly universal 
family of hash functions. 

Proof: Follows as an immediate corollary of the following lemma which shows how to 
convert any A - universal family of hash functions into a strongly - universal family of 
10 hash functions. 

Lemma 1 : Let "h" = {h^ : D -» R|x e K}, where R is an abelian group and "k" is the 
set of keys, be a A - universal family of hash functions. Then 

H' = {h' xb :D-> R\xsK,bsR) defined by h' xb (m) s (h x (m) + b) (where the addition 
15 is the operation under the group R) is a strongly universal family of hash functions. 

Proof: For all "m" * "n" s D and all a , J3 s R: 


Pr [h xb (m)=a,h' xJ> (n)= j3] 


(5) 


20 


= Pr [h x (m) + b=a,h x (n) + b=^ 


(6) 


= Pr M™)-K(n)= a-j3, b = a- ^(m)] 


25 



(8) 


= 1/|R 2 


(9) 


8 
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The last equation follows since is a A - universal hash function and h^m) - h^n) can 
take on any value in R with equal probability. 
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The invention claimed is: 

1 1 . A method for producing a shortened representation of a collection of bits, 

2 comprising the steps of: 

3 inputting the collection of "n" bits; 

4 summing a key having at least "n" bits with the collection of bits to produce a 

5 sum; 

6 squaring the sum to produce a squared sum; 

7 performing a modular "p" operation on the squared sum, where "p" is at least as 

8 large as a first prime number greater than 2 n to produce a modular "p" result; 

9 performing a modular 2 1 operation on the modular "p" result to produce a 

10 modular 2 1 result where, "1" is less than "n"; and 

1 1 outputting the modular 2 1 result. 

1 2. A method for producing a shortened representation of a collection of bits, 

2 comprising the steps of: 

3 inputting the collection of "n" bits; 

4 summing a first key having at least "n" bits with the collection of bits to produce a 

5 first sum; 

6 squaring the first sum to produce a squared sum; 

7 summing the squared sum with a second key having at least "n" bits to produce a 

8 second sum; 

9 performing a modular "p" operation on the second sum, where "p" is at least as 

10 large as a first prime number greater than 2 n to produce a modular "p" result; 

1 1 performing a modular 2' operation on the modular "p" result to produce a 

12 modular 2 1 result where, "1" is less than "n"; and 

13 outputting the modular 2 1 result. 

1 3. A method for producing a shortened representation of a collection of bits, 

2 comprising the steps of: 

3 inputting a collection of "n" bits; 
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4 summing a key having at least "n" bits with the collection of bits to produce a 

5 sum; 

6 squaring the sum to produce a squared sum; 

7 repeating the previous three steps at least once to produce a plurality of squared 

8 sums, where a different key is used each time the steps are repeated; 

9 summing the plurality of squared sums to produce a summation; 

10 performing a modular "p" operation on the summation, where "p" is at least as 

1 1 large as a first prime number greater than 2° to produce a modular "p" result; 

12 performing a modular 2 1 operation on the modular "p" result to produce a 

13 modular 2 1 result where, "1" is less than "n"; and 

14 outputting the modular 2 1 result. 
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ABSTRACT 

An efficient hashing technique uses W ^ W operations to hash a string "w" 

words long rather than the ^operations of the prior art. This efficiency is achieved by 
squaring the sum of the key and the string to be hashed rather than forming a product of 
the key and the string to be hashed. 

h{m) = ({m + a) 2 mod p )mod 2 , 
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